Your privacy matters to us. This Privacy Policy explains exactly what personal data mil04d collects, why we collect it, how it is used and protected, and what rights you hold over your information as a player on our platform.
Our Privacy Commitments
The sections below set out the full legal detail. These cards summarise the six core principles that guide every data decision we make at mil04d.
Every session on the mil04d Platform is protected by industry-standard 256-bit SSL/TLS encryption. Your login credentials, payment details, and personal data are transmitted securely at all times.
mil04d collects only the personal data that is strictly necessary to operate your account, process transactions, and meet our compliance obligations. We do not collect data speculatively.
Your personal data is never sold, rented, or traded to third-party marketers. We share data only with trusted service partners — payment processors, KYC verification providers, and fraud-prevention systems — under strict contractual obligations.
mil04d uses only essential and analytics cookies. We do not deploy third-party advertising cookies or tracking pixels that follow you across the web. Our cookie use is documented fully in Section 6 of this policy.
We do not hold your personal data indefinitely. Retention periods are tied to regulatory requirements and operational necessity. Once a retention period expires, data is securely deleted or anonymised.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. mil04d responds to all verified data requests within 30 days — details in Section 9.
This Privacy Policy ("Policy") describes how mil04d ("the Company", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to players, prospective players, and visitors to the Platform accessible at https://mil04d.net and all associated mobile interfaces (collectively, "the Platform").
This Policy forms part of, and should be read alongside, the mil04d Terms & Conditions. By registering an account or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents and you consent to the processing of your personal data as described herein.
mil04d is committed to handling personal data responsibly, consistently with internationally recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. While Indonesia's primary data protection framework (Undang-Undang Perlindungan Data Pribadi — UU PDP, Law No. 27 of 2022) is referenced as a baseline standard, this Policy is written to meet international best practice and applies to all players regardless of their location within Indonesia — whether in Jakarta, Surabaya, Bandung, Medan, Bali, Yogyakarta, or elsewhere.
This Policy applies to personal data collected via the Platform, via our live chat and email support channels, and via any promotional campaigns run by mil04d. It does not apply to third-party game studio environments, which are governed by those studios' own privacy policies.
For the purposes of applicable data protection law, mil04d acts as the data controller in respect of all personal data collected and processed via the Platform. This means that mil04d determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.
Where mil04d engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification platforms, or analytics providers), those providers act as data processors and are bound by contractual data processing agreements that restrict their use of your data to the specific purposes authorised by mil04d.
Contact details for the mil04d data protection function are set out in Section 14 of this Policy.
mil04d collects personal data through several channels. The following table sets out the categories of data collected, the source of collection, and the context in which collection occurs:
| Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number (KTP or passport), profile photograph from identity document | Account registration and KYC verification |
| Contact Data | Email address, mobile phone number, city and province of residence within Indonesia | Account registration, support interactions |
| Financial Data | Bank account number, bank name (BCA / BRI / BNI / Mandiri / CIMB Niaga / BSI / Bank Permata), e-wallet identifiers (OVO / DANA / GoPay / ShopeePay / LinkAja), deposit and withdrawal history, transaction timestamps | Deposit and withdrawal processing, AML compliance |
| Account Data | Username, encrypted password hash, account balance, bonus balance, wagering history, game session records, bet records, win/loss records | Platform use — automatically generated upon account activity |
| Technical Data | IP address, device type and model, operating system, browser type and version, screen resolution, session duration, pages visited, clickstream data | Collected automatically via server logs and analytics tools during Platform visits |
| Communication Data | Live chat transcripts, email correspondence content and metadata, support ticket history | Customer support and dispute resolution |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session time alerts, cooling-off periods, self-exclusion requests and their effective dates | Responsible gaming tools — player-initiated or compliance-initiated |
| Verification Documents | Scanned or photographed copies of government-issued identity documents, proof-of-address documents (bank statement, utility bill), and bank account confirmation letters | KYC verification — requested at thresholds defined in our Terms & Conditions |
We do not collect: sensitive special-category data such as racial or ethnic origin, religious beliefs, political opinions, health data, biometric data, or sexual orientation — except to the limited extent that a submitted identity document may incidentally contain such information, in which case it is not extracted, processed, or stored separately from the document image itself.
mil04d processes your personal data only for specified, explicit, and legitimate purposes. The following table maps each processing purpose to the relevant data categories:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity Data, Contact Data, Account Data |
| Processing deposits and withdrawals in IDR | Financial Data, Identity Data, Account Data |
| Identity verification (KYC) | Identity Data, Verification Documents, Financial Data |
| Fraud detection and prevention | Technical Data, Financial Data, Account Data, Identity Data |
| Anti-money laundering (AML) monitoring | Financial Data, Identity Data, Account Data |
| Customer support and dispute resolution | Communication Data, Account Data, Financial Data |
| Responsible gaming monitoring and intervention | Responsible Gaming Data, Account Data, Financial Data |
| Platform improvement and analytics | Technical Data, Account Data (aggregated and anonymised) |
| Promotional communications (where consented) | Contact Data, Account Data (for personalisation) |
| Legal and regulatory compliance | All categories, as required by applicable law or regulatory request |
mil04d does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you without human review. Where automated systems flag an account for review (for example, a fraud-detection algorithm identifying an unusual pattern), the final decision to suspend or close an account is made by a qualified compliance team member.
mil04d relies on one or more of the following legal bases when processing your personal data:
The mil04d Platform uses a limited set of cookies and similar technologies. mil04d does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. The cookies in use fall into the following categories:
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
| Strictly Necessary | Session management, authentication, CSRF protection, load balancing. Without these, the Platform cannot function. | Session / up to 30 days (remember-me) | No — essential |
| Functional | Remembering language preference, game lobby layout, responsible gaming alert settings | Up to 12 months | Yes |
| Analytics | Aggregate, anonymised usage statistics to understand page performance and navigation patterns. No personally identifiable data is transmitted to analytics providers. | Up to 24 months | Yes |
You may manage or withdraw your consent to functional and analytics cookies at any time via your browser settings or by contacting our support team. Withdrawing consent to functional cookies may degrade certain Platform features. Withdrawing consent to analytics cookies has no effect on Platform functionality.
mil04d shares personal data with third parties only where strictly necessary and under the following controlled conditions:
No data sales: mil04d does not sell, rent, exchange, or otherwise trade your personal data to any third party for commercial or marketing purposes. This commitment is absolute and applies to all player data regardless of account status or activity level.
mil04d retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods required by applicable legal and regulatory obligations. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active account) | Duration of account + 5 years post-closure | AML regulatory obligation and contractual records |
| KYC / verification documents | 5 years from account closure or last transaction | International AML record-keeping standards |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Communication data (support transcripts) | 3 years from the date of the interaction | Dispute resolution and service quality |
| Technical / log data | 13 months from collection | Security monitoring, fraud detection |
| Responsible gaming records | Duration of account + 5 years post-closure | Duty of care obligations |
| Marketing consent records | Until consent is withdrawn + 3 years | Evidencing lawful consent |
Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised such that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.
As a data subject, you hold a set of rights in relation to your personal data held by mil04d. These rights are summarised below. To exercise any of these rights, please contact us using the details in Section 14. mil04d will respond to all verified requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it.
You have the right to request a copy of all personal data mil04d holds about you, along with information about how it is being processed.
You have the right to require mil04d to correct any inaccurate or incomplete personal data held about you without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
You may request that mil04d restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
Where processing is based on consent or contractual necessity, you may request your data in a structured, commonly used, machine-readable format for transfer to another service.
You have the right to object to processing based on legitimate interests. You may also withdraw marketing consent at any time via your account settings or by contacting support.
Identity verification for rights requests: To protect your data, mil04d will ask you to verify your identity before processing any data rights request. This typically requires confirmation of account details and, in some cases, the same KYC documentation used during account verification. This step cannot be waived — it exists to prevent unauthorised access to your personal data.
mil04d implements a layered, defence-in-depth security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:
Your responsibility: The security of your account also depends on you. Keep your password strong and unique, do not share your login credentials with anyone, and log out of your account when using shared or public devices. If you suspect unauthorised access to your account, contact mil04d's 24/7 live chat support immediately.
The mil04d Platform is strictly for adults aged 21 years and over. mil04d does not knowingly collect personal data from any individual under the age of 21. Account registration by any person under 21 is prohibited, and any such account discovered will be immediately closed with the full process set out in the Terms & Conditions applied.
If you are a parent or guardian and believe that a minor under your care has registered an account or provided personal data to mil04d, please contact us immediately at [email protected] (plain text — not a clickable link) or via the 24/7 live chat support channel. Upon verification, we will promptly investigate, close the account, and delete all personal data associated with the minor's registration.
mil04d uses age-verification checks as part of the account registration and KYC processes to enforce the 21+ eligibility requirement. We encourage responsible gaming and remind all adults to ensure that minors in their household do not have access to their mil04d account credentials or devices on which their account session remains active.
mil04d operates as an internationally licensed platform. In the course of delivering services to players across Indonesia — including in Jakarta, Surabaya, Bandung, Medan, Bali, Semarang, Makassar, and other cities — your personal data may be transferred to, stored in, or processed in jurisdictions outside Indonesia. This may occur, for example, when data is processed by KYC providers, fraud detection systems, or cloud infrastructure providers whose servers are located in another country.
Where personal data is transferred internationally, mil04d ensures that adequate safeguards are in place to protect the data to a standard at least equivalent to the protections afforded under applicable Indonesian data protection law and internationally recognised standards. Such safeguards include:
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our data protection function at the details provided in Section 14.
mil04d reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, changes in our data processing practices, new product features, or improvements to how we communicate our data practices to you.
When a material change is made to this Policy, mil04d will notify registered players via email to the address on file and/or via a prominent notice displayed upon next login to the Platform. The "Last updated" date at the top of this Policy will be revised to reflect the date on which the amended Policy takes effect.
Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure by contacting our support team. Pending balances will be settled in accordance with our Terms & Conditions.
Stay informed: We recommend reviewing this Privacy Policy periodically, even if you have not received a notification of changes. The current version of this Policy is always accessible at mil04d.net/privacy-policy. Archived versions of previous policies are available upon request by contacting our support team.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which mil04d processes your personal data, or if you wish to exercise any of your data subject rights described in Section 9, please contact our data protection function through one of the following channels:
When contacting us about a data rights request, please include your registered username, the email address associated with your account, a clear description of your request, and, where applicable, a copy of a valid identity document for verification purposes. mil04d's data protection team will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days.
If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For players in Indonesia, the supervisory authority for personal data protection matters under UU PDP is the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital — Komdigi).
Support hours: Our live chat and email support teams operate 24 hours a day, 7 days a week, including public holidays, serviced in WIB (UTC+7). Indonesian-speaking support agents are available at all times to assist players who prefer to communicate in their native language, even though the Platform itself is presented in English.
For general inquiries about your account, deposits, withdrawals, bonuses, and account management, please visit our FAQ page.
Your data is safe with us — now enjoy the games. Join over 2 million players across Indonesia. 21+ only. Play responsibly.